Installing udpstp

One command installs the latest release of udpstp. Install it on both Test hosts, then follow the quickstart to share a key and run a Test.

Linux

The installer selects a matching binary and places it in ~/.local/bin.

curl -fsSL https://udpstp.com/install.sh | sh

Run it again to update. It leaves your shell configuration unchanged. If ~/.local/bin is outside your PATH, add it using your shell’s configuration.

macOS

brew install pederbe/tap/udpstp

Use brew upgrade udpstp for updates and brew uninstall udpstp to remove it. Homebrew installs udpstp on Linux too.

Windows

In PowerShell

irm https://udpstp.com/install.ps1 | iex

The installer uses your account’s LocalAppData\Programs\udpstp folder and adds it to PATH. You can use udpstp in the current PowerShell window immediately. Sign out and back in to refresh PATH for other applications. The Windows guide covers key-file permissions, firewall rules and running the Server as a service.

WinGet catalog approval is pending. The PowerShell installer and portable download are available now.

Check that it works

udpstp --version

It prints udpstp and the version. If the command isn’t found, check that the install folder is in your PATH. Then go on to the quickstart.

Other ways to install

Signed Linux packages

The apt and dnf repositories provide normal package-manager updates and the Server’s systemd unit. The service stays disabled until you configure it and requires systemd 247 or later. Hosting a Server covers configuration and startup.

Debian and Ubuntu

Add the repository once, then install udpstp:

curl -fsSL https://packages.udpstp.com/udpstp.gpg | sudo tee "/usr/share/keyrings/udpstp.gpg" >/dev/null
echo "deb [signed-by=/usr/share/keyrings/udpstp.gpg] https://packages.udpstp.com/apt stable main" | sudo tee /etc/apt/sources.list.d/udpstp.list
sudo apt update
sudo apt install udpstp

Updates arrive with apt upgrade. Remove the package with sudo apt remove udpstp.

Fedora, RHEL and similar distributions

sudo curl -fsSLo /etc/yum.repos.d/udpstp.repo https://packages.udpstp.com/udpstp.repo
sudo dnf install udpstp

Updates arrive with dnf upgrade. Remove the package with sudo dnf remove udpstp.

Arch Linux

The regular release workflow prepares a native Arch Linux package. Once udpstp-x86_64.pkg.tar.zst is listed on the latest release, download it and install it with pacman:

sudo pacman -U udpstp-x86_64.pkg.tar.zst

Download the latest file again and repeat the command to update. Remove it with sudo pacman -R udpstp-bin. No AUR account or Rust toolchain is needed. The Server’s service stays disabled until you configure it.

OpenWrt

OpenWrt 25.12 on x86_64 can install a local APK built from the static Linux release binary. The OpenWrt package guide shows how to build it on a Linux computer with the OpenWrt SDK. This owned source feed is separate from OpenWrt’s upstream packages feed. There is no hosted APK repository. Other router targets are not yet qualified.

Transfer your built udpstp.apk to the router, replacing router with its address, then install it:

scp -O udpstp.apk root@router:/tmp/udpstp.apk
ssh root@router 'apk add --no-network --allow-untrusted /tmp/udpstp.apk'

The local APK is unsigned. --allow-untrusted permits that file for this command. Use an APK you built or obtained from someone you trust. The package needs about 5 MiB of storage and uses OpenWrt’s existing libc package, with no additional runtime libraries to install.

Create a Shared Key on your computer as in the quickstart, then transfer its keys.toml through SSH into a private directory:

ssh root@router 'set -e; umask 077; mkdir -p /etc/udpstp; chmod 700 /etc/udpstp; cat > /etc/udpstp/keys.toml; chmod 600 /etc/udpstp/keys.toml' < keys.toml

On the router, run a Client against your Server:

udpstp client --key-file /etc/udpstp/keys.toml --max-hops 12 server.example.net

The package also provides udpstp server for manual use, as described in Hosting a Server. Installation starts no Server and adds no service or firewall rule. Allow inbound UDP on the Standard Port only from the network you intend to test if you run a Server on the router.

To update, build the latest APK and repeat the transfer and installation commands. Stop any manually started Server before the upgrade and restart it afterwards. Remove the package with apk del udpstp. Upgrade and removal leave your key files and configuration in place.

Optional Server service

Install the separately built udpstp-server.apk to let OpenWrt’s procd service manager run the Server. Install udpstp.apk first as above, then transfer and install the service package:

scp -O udpstp-server.apk root@router:/tmp/udpstp-server.apk
ssh root@router 'apk add --no-network --allow-untrusted /tmp/udpstp-server.apk'

On the router, give the service its own copy of your key file. The package creates an unprivileged account named udpstp. Its key file must belong to that account and stay private:

umask 077
cp /etc/udpstp/keys.toml /etc/udpstp-server/keys.toml
chown udpstp:udpstp /etc/udpstp-server/keys.toml
chmod 600 /etc/udpstp-server/keys.toml

Edit /etc/udpstp-server/server.toml. The supplied file listens only on 127.0.0.1. Set listen to the router address your Clients will use, choose max_hops for your path, and allow inbound UDP on the Standard Port from that network. Leave key_file out of the configuration, since the service passes its own key path. The package changes no firewall rules.

Enable the Server in OpenWrt’s UCI configuration, then start it:

uci set udpstp.server.enabled='1'
uci commit udpstp
service udpstp-server start
service udpstp-server status
logread -e udpstp

The Server now starts at boot and procd restarts it after a failure. The enable flag defaults to 0, so installation and boot keep the Server stopped until you opt in. OpenWrt registers the init script for boot independently of that flag. Missing keys or invalid configuration leave no running Server. Check status and logread after startup.

After changing the settings or keys, run service udpstp-server restart. To stop the Server and keep it off at boot:

uci set udpstp.server.enabled='0'
uci commit udpstp
service udpstp-server stop

For updates, build and transfer both APKs, then install them together with apk add --no-network --allow-untrusted /tmp/udpstp.apk /tmp/udpstp-server.apk. Your enable flag, modified settings and key file stay in place. OpenWrt restarts an enabled Server during the upgrade. apk del udpstp-server stops and removes the service, leaving the Client package, key and modified settings.

Portable downloads

The release page provides archives for the supported targets. Extract an archive and run its udpstp executable. Platform differences explains the available features.

Cargo

With Rust installed, build a release from source:

cargo install --locked udpstp

With cargo-binstall installed, fetch a matching prebuilt release:

cargo binstall udpstp

Building from source covers compiler and platform prerequisites.

AUR and Scoop recipes remain available as sources for later catalog submissions.